From dbfdfd0728a9c7f55e89b091bd618fc6b32c4ba7 Mon Sep 17 00:00:00 2001 From: "fox.cpp" Date: Thu, 19 Sep 2019 01:59:50 +0300 Subject: [PATCH] dist: Add LogsDirectory to systemd unit See https://github.com/foxcpp/maddy/wiki/fail2ban-configuration Without that it will be impossible for maddy to write to /var/log/maddy due to sandboxing (ProtectSystem=strict). --- dist/maddy.service | 1 + dist/maddy@.service | 1 + 2 files changed, 2 insertions(+) diff --git a/dist/maddy.service b/dist/maddy.service index 05a7790..2a36502 100644 --- a/dist/maddy.service +++ b/dist/maddy.service @@ -20,6 +20,7 @@ DynamicUser=true ConfigurationDirectory=maddy RuntimeDirectory=maddy StateDirectory=maddy +LogsDirectory=maddy ReadOnlyPaths=/usr/lib/maddy # Strict sandboxing. You have no reason to trust code written by strangers from GitHub. diff --git a/dist/maddy@.service b/dist/maddy@.service index 75ee837..34a29bf 100644 --- a/dist/maddy@.service +++ b/dist/maddy@.service @@ -13,6 +13,7 @@ DynamicUser=true ConfigurationDirectory=maddy StateDirectory=maddy ReadOnlyPaths=/usr/lib/maddy +LogsDirectory=maddy # Strict sandboxing. You have no reason to trust code written by strangers from GitHub. PrivateTmp=true